@SpaceCadet@feddit.nl avatar

SpaceCadet

@SpaceCadet@feddit.nl

This profile is from a federated server and may be incomplete. Browse more on the original instance.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Without knowing what was being hosted, the only surefire way would be pulling a complete disk image with cat or dd.

That’s not surefire, unless you’re doing it offline. If the data is in motion (like a database that’s being updated), you will end up with an inconsistent or corrupt backup.

Surefire in that case would be something like an lvm snapshot.

If you wanted to stay on a similar system, RHEL 9 would be a good option or one of its “as similar as possible” like AlmaLinux.

No love for Rocky?

Also Oracle Linux is still free, and fully compatible with RHEL.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

LOL this isn’t even a Linux issue. This is an “I’m confused about how DNS works” issue.

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

Read the post. The user obviously didn’t even know that Mullvad uses DNS over TLS and that the other providers used regular DNS, nor did he know how to properly troubleshoot a DNS issue, which is a skill you should have on any OS if you’re going to mess about with DNS settings.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

I have had so many instances of having to spend hours upon hours upon hours just do figure out how to do some basic shit on Linux that I can do on every operating system within a matter of 5 minutes

skill issue.

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

How the fuck am I supposed to know that Network Manager won’t support DNS over TLS

Read the documentation? Use google?

The very first hit when you google “dns over tls tumbleweed” provides the answer: dev.to/…/using-dns-over-tls-on-opensuse-linux-in-…

A more generic query “dns over tls linux” gives this, which works just the same: medium.com/…/enable-dns-over-tls-in-linux-using-s…

Both google searches return several more hits that basically say the same thing.

Even the NetworkManager reference manual refers you to systemd-resolved as the solution: networkmanager.dev/…/settings-connection.html

Key Name Value Type Description
dns-over-tls int32 Whether DNSOverTls (dns-over-tls) is enabled for the connection. DNSOverTls is a technology which uses TLS to encrypt dns traffic. The permitted values are: “yes” (2) use DNSOverTls and disabled fallback, “opportunistic” (1) use DNSOverTls but allow fallback to unencrypted resolution, “no” (0) don’t ever use DNSOverTls. If unspecified “default” depends on the plugin used. Systemd-resolved uses global setting. This feature requires a plugin which supports DNSOverTls. Otherwise, the setting has no effect. One such plugin is dns-systemd-resolved.

I don’t use NetworkManager, I’ve never even used Tumbleweed and I found the answer in all of 10 minutes. Of course that doesn’t help if you’re so clueless that you didn’t even know that you were using DNS-over-TLS, or that DoT is a very recent development that differs significantly from regular DNS and that it requires a DNS resolver that supports it.

when every other operating system does?

Like Windows 10? (Hint: it doesn’t)

You use Arch. Mr skillful

Who cares what I use. When I’m messing with something I don’t understand, I at least read the documentation first instead of complaining on the internet and calling the whole community toxic and, I quote, “Butthurt Linux gobblers” when you get the slightest bit of pushback.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Why not your current computer? No time like the present…

SpaceCadet,
@SpaceCadet@feddit.nl avatar

It’s not just about trusting Microsoft, but about control over the technology. Users will never have real control over AI technology, it’s too valuable and the inner workings are anxiously being kept under wraps by the big techbro companies. It also runs on their computers for the most part, so of course we can’t trust what’s being done with it, regardless of whether Microsoft has been a good boy or a bad boy recently.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Use Xorg with the proprietary driver instead of Wayland for the time being. Much less issues. You can always switch to Wayland later when either Nvidia support matures, or when your next computer has an AMD GPU.

Or get a cheap ass AMD GPU, like an RX6400, plop it in as a second GPU and run on that in Linux. Perfectly serviceable for plain desktop stuff.

Or run on integrated graphics, if you have it. Again, perfectly serviceable for plain desktop stuff.

Problems have solutions :)

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Yeah but you said you wanted a dual-boot machine for your next computer, with Windows only for gaming. What I meant is: why not get a head start and make your current computer that dual-boot machine?

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

I don’t think the word Reich, without further context, is by itself suspect in German. It just a generic word for realm, and is not bound to any specific political system. Even their parliament building is still called the Reichstag. In German it’s also common to refer to modern day monarchies as Königreich. Even the Belgian constitution, where German is one of the three official languages, refers to the country as das Königreich. And there are even two whole countries that have it in their German name: Österreich and Frankreich.

Where it becomes suspect is when inexplicably the German word is used in the English language in a certain context by certain politicians with certain ideas, as it is here.

anders, to linux
@anders@theres.life avatar

Has anyone tried the DE for in the recent years?

How was the experience?

@linux

SpaceCadet,
@SpaceCadet@feddit.nl avatar

There was a short period of time when enlightenment was the default window manager for Gnome, later to be replaced by Sawfish. It was a hideous experience by the way.

Early Gnome was weird. The Gnome File Manager was also originally based on the terminal program Midnight Commander.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

in early 2000’s, internet access was extremely fucking expensive, so most software was peer-to-peer shared, not even by torrent, but on CD’s or floppys, or local neighborhood ad-hoc and internal ISP networks

Uh no. I was there. In 1995 or 1996, I may have still used a shareware CD-ROM, or some less-legal compilation CD-ROM, but in the 2000s the most common way to install software by far was to download it over the internet.

And there was no access control whatsoever. A literal spyware with full access to your system, that only puts a purple fucking gorilla on your screen, that runs around and does absolutely fucking nothing? Sign me the fuck in. If your virus did something even something remotely useful, like show weather and currency rates, then you could rest assured that it would infect every single computer in the country.

I think the point of the post is that back then people were warned against installing bonzi buddy and such, and we were told to install software only from trustworthy sources. Spyware software rightfully flagged such software as malware too. Nowadays, there are appstores full of banal apps which harvest much more personal information about you than bonzi buddy ever did and we’re not batting an eye about it, and even though we have “Access control” we just happily click accept when our calculator wants to read our emails, and we’ve accepted it as a normal way of doing things.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

It’s like those websites and applications that ask you:


<span style="color:#323232;">Hey do you want to turn on this bullshit feature?
</span><span style="color:#323232;">
</span><span style="color:#323232;">[Yes] [Ask me again later]
</span>
SpaceCadet,
@SpaceCadet@feddit.nl avatar

videos above 1080p can sometimes cause problems if they have heavy encoding like vp9 or av1

Yeah they’re probably decoded in software because I doubt that the integrated graphics supports hardware decoding of those recentish codecs.

At that point, just put a gt1030 in it.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Actually, are these 2 forks of another, when?

Yes forgejo was forked from gitea in 2022. It was a soft fork at first, but became a hard fork earlier this year.

Full story here: forgejo.org/2024-02-forking-forward/

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Don’t you control your dhcp server?

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

True that. Hadn’t thought of that as it’s not my typical VPN use case.

I’m not sure what a VPN provider could do about that though, they don’t control the operating system’s networking stack. If the user or an outside process that the user decides to trust (i.e. a dhcp server) adds its own network routes, the OS will follow it and route traffic outside of the tunnel.

The defenses I see against it are:

  • Run the VPN and everything that needs to go through the VPN in a virtualized, non-bridged environment so it’s unaffected by the routing table.
  • Put a NAT-ing device in between your computer and the network you want to use
  • Modify the DHCP client so that option 121 is rejected

Edit: thinking about it some more, on Linux at least the VPN client could add some iptables rules that block traffic going through any other interface than the tunnel device (i.e. if it’s not through tun0 or wg0, drop it). Network routes can’t bypass iptables rules, so that should work. It will have the side effect that the VPN connection will appear not to work if someone is using the option 121 trick though, but at least you would know something funny was happening.

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

Oh and don’t forget to take backups of your /home. Thats good practice for every desktop environment.

The config files of the major desktop environments have become a mess though. Plasma absolutely shits files all over ~/.config and /.local/share where they sit mingled together with the config files of all your other applications and most of it is thoroughly undocumented. I’ve been in the situation where I wanted to restore a previous state of my Plasma desktop from my backups or just start with a clean default desktop and there is just no straightforward way to do that, short of nuking all your configurations.

Doing a quick find query in my current home directory, there are 57 directories and 79 config files that have either plasma or kde in the name, and that doesn’t even include all the /.config/* files belonging to plasma or kde components that don’t have it in their name explicitly (e.g. dolphinrc, katerc, kwinrc, powerdevilrc, bluedevilglobalrc , …)

It was much simpler in the old days when you just had something like a ~/.fvwmrc file that was easy to backup and restore, even early kde used to store everything together in a ~/.kde directory.

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

apt purge nano is one of the first things I do on a new Debian installation. Much easier to remember than having to use update-alternatives, select-editor and the $EDITOR variable to convince the likes of vigr,vipw, visudo,crontab -e,… that I really want to use vim as my primary editor.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

The attack surface will be a systemd daemon running with UID=0 instead, because how else are you going to hand out root privileges?

So it doesn’t really change anything to the attack surface, it just moves it to a different location.

SpaceCadet,
@SpaceCadet@feddit.nl avatar

Not really, because you’re now going to make it do more, i.e. incorporate the functionality of sudo and expose it to user input. So unless you can prove that the newly written code is somehow inherently more secure than sudo’s existing code, the attack surface is exactly the same.

SpaceCadet, (edited )
@SpaceCadet@feddit.nl avatar

I wonder if it’s possible to run their remapping program in a Windows virtual machine.

That should work if you can pass through the entire USB host device to the VM.

I do this with my QK80, which also has Windows only software. I have a KVM virtual machine with Windows, and when I want to configure the QK80, I use the “pass through USB host device” option to give it direct access to the keyboard, and run the software in the VM. It works fine.

If you do this, you temporarily need to connect a second keyboard though because as soon as you pass through the keyboard to the VM it becomes inaccessible for the host OS.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • tacticalgear
  • magazineikmin
  • khanakhh
  • everett
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • ethstaker
  • InstantRegret
  • thenastyranch
  • JUstTest
  • ngwrru68w68
  • cisconetworking
  • cubers
  • osvaldo12
  • modclub
  • GTA5RPClips
  • tester
  • Durango
  • provamag3
  • anitta
  • Leos
  • normalnudes
  • lostlight
  • All magazines